Which term is an automated version of a playbook with clearly defined interaction points for human analysis?

Which term is an automated version of a playbook with clearly defined interaction points for human analysis?

• A. Playbook
• B. Bootstrap
• C. Runbook
• D. Traffic

Answer: (C)

The main idea is turning a set of procedures into a workflow that a system can run automatically while still pausing for human input at defined moments. A runbook is designed to be machine-executable: it specifies when to trigger actions, the exact steps to take, what data to collect, and where to pause for verification or approval by a human analyst. This creates consistent, repeatable responses in security operations, often within SOAR platforms, ensuring faster and auditable outcomes while preserving necessary oversight. A playbook, by contrast, describes the manual steps people should follow without automation. Bootstrap is about initializing systems or loading components, not incident-response procedures. Traffic refers to the data being processed, not the procedural framework. So the automated version with defined human interaction points is a runbook.

The main idea is turning a set of procedures into a workflow that a system can run automatically while still pausing for human input at defined moments. A runbook is designed to be machine-executable: it specifies when to trigger actions, the exact steps to take, what data to collect, and where to pause for verification or approval by a human analyst. This creates consistent, repeatable responses in security operations, often within SOAR platforms, ensuring faster and auditable outcomes while preserving necessary oversight. A playbook, by contrast, describes the manual steps people should follow without automation. Bootstrap is about initializing systems or loading components, not incident-response procedures. Traffic refers to the data being processed, not the procedural framework. So the automated version with defined human interaction points is a runbook.